This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/mCt7UGq2s1qnA69MYZljhYxWiD4.roa File: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (raw, json) Hash identifier: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg= Subject key identifier: 98:2B:7B:50:6A:B6:B3:5A:A7:03:AF:4C:61:99:63:85:8C:56:88:3E Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B7F16007CD0FCCD8B9CB92E80AB734499 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/mCt7UGq2s1qnA69MYZljhYxWiD4.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35684 IP address blocks: 109.71.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:00:7c:d0:fc:cd:8b:9c:b9:2e:80:ab:73:44:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=982b7b506ab6b35aa703af4c619963858c56883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:86:c2:a8:cb:9e:94:1b:b9:35:3b:97:55: c2:dd:15:1d:69:be:ce:78:d5:a9:0b:a3:26:41:9c: 93:5d:13:f3:7d:b8:c2:fc:af:cc:a6:f8:a2:c2:d3: 56:c6:d0:b6:f0:91:e4:f3:c9:4d:50:e4:e9:3b:ea: 79:ac:d5:53:57:89:c3:81:17:fe:1f:f2:8b:9f:a5: d9:5b:40:c4:98:ff:23:7f:52:16:78:ba:d5:bc:df: 15:93:11:89:a7:5e:d4:df:df:b1:03:ad:5b:db:ee: 32:31:0b:0d:fd:bd:40:8a:68:7a:86:aa:c1:72:1b: 47:ad:67:25:2c:dc:36:29:dd:8d:64:a7:bc:6c:42: f3:a1:59:7a:0a:cd:8d:ce:da:fc:2d:44:67:f5:f2: 8a:26:2c:4e:d3:46:8a:8a:c9:8e:f7:7a:c5:3e:8e: e0:c7:eb:85:63:e7:c0:7f:d3:e3:e3:bc:83:a0:69: 94:51:ef:c9:35:91:a7:0b:a0:cb:31:24:15:ab:ed: 6f:ab:87:c5:98:d2:b8:fb:6f:d5:05:06:0c:14:e2: 58:3d:51:2f:9f:18:a0:d7:45:13:c3:21:42:3a:5a: 7e:b1:30:78:45:c2:6f:96:72:b7:4f:e4:53:e6:17: 4d:fa:9f:11:e2:00:45:04:47:11:88:29:8f:e5:2f: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:7B:50:6A:B6:B3:5A:A7:03:AF:4C:61:99:63:85:8C:56:88:3E X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/mCt7UGq2s1qnA69MYZljhYxWiD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.26.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:18:6b:6d:91:47:f6:68:54:6a:16:03:ee:6b:a0:10:25:87: 08:1f:e6:48:78:32:9b:86:bb:85:26:e2:8a:69:12:98:f3:bd: 84:90:29:e4:76:c4:b3:30:2b:a7:dc:26:62:81:8b:d7:06:80: 29:1a:f1:82:83:0d:c3:71:1f:58:e3:a5:74:54:a2:22:a1:10: 86:f1:05:80:6f:b9:be:67:8e:54:25:bf:8c:00:56:5f:c2:73: 37:cb:7e:80:ef:ec:56:46:aa:6c:76:58:84:ae:57:aa:c3:cf: 7f:95:cc:e4:e7:0e:ce:ec:6d:08:49:3c:42:2c:40:bd:a0:ab: da:a5:f2:f4:bd:6f:6a:15:e2:0e:71:a7:22:bb:51:27:10:73: b1:86:c3:4b:59:db:7b:77:ae:57:d3:73:14:3c:62:6b:91:9f: 60:d0:80:a4:36:a6:87:00:76:34:57:b5:c7:69:88:df:2f:51: 36:f9:31:54:ea:2b:04:45:2e:7c:ff:e6:2d:ce:f2:2d:9b:2e: 4e:52:46:de:fa:32:93:87:a3:a6:11:56:58:0d:e4:80:61:bb: d6:e2:a4:6a:c3:31:6b:3d:7b:39:c9:f8:75:0b:c9:c3:65:ea: af:be:f2:96:f6:60:c6:b7:33:57:dc:78:92:87:8c:9e:b7:d3: 1f:6b:92:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgB80PzNi5y5LoCrc0SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODJiN2I1MDZhYjZiMzVhYTcwM2FmNGM2MTk5NjM4NThjNTY4ODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqGwqjLnpQbuTU7l1XC3RUdab7O eNWpC6MmQZyTXRPzfbjC/K/MpviiwtNWxtC28JHk88lNUOTpO+p5rNVTV4nDgRf+ H/KLn6XZW0DEmP8jf1IWeLrVvN8VkxGJp17U39+xA61b2+4yMQsN/b1Aimh6hqrB chtHrWclLNw2Kd2NZKe8bELzoVl6Cs2Nztr8LURn9fKKJixO00aKismO93rFPo7g x+uFY+fAf9Pj47yDoGmUUe/JNZGnC6DLMSQVq+1vq4fFmNK4+2/VBQYMFOJYPVEv nxig10UTwyFCOlp+sTB4RcJvlnK3T+RT5hdN+p8R4gBFBEcRiCmP5S9KfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgre1BqtrNapwOvTGGZY4WMVog+MB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvbUN0N1VHcTJzMXFuQTY5TVlabGpoWXhXaUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUcaMA0G CSqGSIb3DQEBCwUAA4IBAQCdGGttkUf2aFRqFgPua6AQJYcIH+ZIeDKbhruFJuKK aRKY872EkCnkdsSzMCun3CZigYvXBoApGvGCgw3DcR9Y46V0VKIioRCG8QWAb7m+ Z45UJb+MAFZfwnM3y36A7+xWRqpsdliErleqw89/lczk5w7O7G0ISTxCLEC9oKva pfL0vW9qFeIOcaciu1EnEHOxhsNLWdt7d65X03MUPGJrkZ9g0ICkNqaHAHY0V7XH aYjfL1E2+TFU6isERS58/+YtzvItmy5OUkbe+jKTh6OmEVZYDeSAYbvW4qRqwzFr PXs5yfh1C8nDZeqvvvKW9mDGtzNX3HiSh4yet9Mfa5Io -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:28 2026 by rpki-client